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ABSTRACT 


The formal specification, design, implementation, and verification of a compiler for a 
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checked verification of the compiler. 


One of the main problem areas considered is the formal mathematical treatment of 
programming languages and compilers suitable as input for automated program 
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Several technical and methodological problems of mechanically verifying large 
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notably methods to reason about pointers, fixed points, and quantification These 
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Abstracts 


The formal specification, design, implementation, and verification of a 
compiler for a Pascal-like language is described. All components of the com- 
pilation process such as scanning, parsing, type checking, and code generation 
are considered. 

The implemented language contains most control structures of Pascal, 
recursive procedures and functions, and jumps. It provides user defined data 
types including arrays, records, and pointers. A simple facility for input — 
output is provided. 

The target language assumes a stack machine including a display mech- } 
anism to handle procedure and function calls. i] 

The compiler itself is written in Pascal Plus, a dialect of Pascal accepted 
by the Stanford verifier. The Stanford verifier is used to give a complete formal 
machine checked verification of the compiler. 

One of the main problem areas considered is the formal mathematical 
treatment of programming languages and compilers suitable as input for au- 
tomated program verification systems. 

Several technical and methodological problems of mechanically verifying 
large software systems are considered. Some new Verification techniques are 
developed, notably methods to reason about pointers, fixed points, and quan- 
tification. These techniques are of general importance and are not limited to 
compiler verification. 

The result of this research demonstrates that construction of large cor- 
rect programs is possible with the existing verification technology. It indicates 
that verification will become a useful software engineering tool in the future. 
Several problem areas of current verification systems are pointed out and areas 
for future research are outlined. 
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Preface 


About three years ago David Luckham hinted to me the possibility of 
verifying a “real” compiler. At that time the idea seemed unrealistic, even 
absurd. After looking closer at the problem and getting more familiar with 
the possibilities of the Stanford verifier a verified compiler appeared not so 
impossible after all. In fact, I was fascinated by the prospect of creating a 
large, correct piece of software; so this subject became my thesis topic. I am 
very grateful to David Luckham for suggesting this topic and for his continued 
advice. 

The research has drastically changed my view of verification and pro- 
gramming in general. Analysis and design of programs (even large ones) can 
be subject to rigorous mathematical treatment - the art of programming may 
become a science after all. 

Naturally, the reader will be skeptical, still, I hope to be able to convey 
some of my fascination. 

This work would have been impossible without the use of the Stanford 
verifier. I have to thank all members of the Stanford verification group for 
providing this excellent tool. Don Knuth’s text processing system TEX was 
a most valuable asset for typesetting a manuscript that must be any typist’s 
nightmare. 

I thank my reading committee David Luckham, Zohar Manna, and Susan 
Owicki for their valuable time, for their careful reading, and their helpful 
advise. . Friedrich von Henke contributed through numerous discussions and 
careful perusal of initial drafts of my writing. Last but not least I thank my 
wife Gudrun for her support. 
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